Privacy Policy

This site can generally be used without providing personal data. Where data is nevertheless processed, we explain here what it is, why it is processed and what rights you have.

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is the operator of this site. Full contact details can be found in the Imprint.

2. Definitions

This policy uses the terminology of the GDPR. The most important terms in brief:

• Personal data means any information relating to an identified or identifiable person – for example name, IP address or location data.
• Processing covers any handling of such data: collection, storage, alteration, retrieval, transmission and erasure.
• Controller is the party that determines the purposes and means of processing.
• Processor processes data on behalf of the controller, for example a hosting provider.
• Consent means your freely given, informed and unambiguous agreement to a specific processing operation.

3. Access data and server log files

Each time this site is accessed, your browser transmits data for technical reasons, which our host stores in log files. This includes:

• browser type and version
• operating system used
• the previously visited page (referrer)
• the subpages accessed
• date and time of access
• IP address
• internet service provider of the accessing system

We do not evaluate this data on a personal level. We need it to deliver the site correctly, ensure its stability and enable prosecution in the event of an attack. The legal basis is our legitimate interest in a secure, functioning service pursuant to Art. 6(1)(f) GDPR.

4. Cookies

Cookies are small text files that your browser stores on your device. Some are technically necessary for the operation of the site, others serve analytics or the attribution of advertising.

Non-essential cookies are only set after you have agreed in the consent banner. The legal basis is then your consent pursuant to Art. 6(1)(a) GDPR in conjunction with the applicable national implementation of the ePrivacy Directive. You can change or withdraw your decision at any time via the cookie settings.

You can also configure your browser not to store cookies at all and to delete cookies already set. In that case, not all functions of the site may remain available.

5. Affiliate links and tracking

This site is funded through affiliate marketing. We link to partner offers and receive a commission if a purchase is made through them. You incur no additional costs.

Cookie-based attribution

When you click a partner link, a cookie may be set. It contains no plain-text data about you, but technical information: an identifier for the referring partner, details of the advertising material clicked, and the time of the click.

Server-to-server attribution

Alternatively or additionally, attribution without a cookie is used. Here the servers involved exchange data directly: type of interaction (click or purchase), a pseudonymised transaction ID, and technical details such as timestamp, IP address and browser type.

Both methods serve solely to correctly attribute referred purchases and settle commissions. The legal basis is our legitimate interest in operating these partnerships (Art. 6(1)(f)); for consent-requiring cookies, your consent (Art. 6(1)(a)).

As we work with various partner networks, we recommend that you also read the privacy information of the respective provider.

6. Analytics and advertising

Where integrated, we use analytics and advertising services to evaluate use of the site and measure campaign performance. These services may set cookies and transmit data – including your shortened IP address – to the respective provider, in some cases to countries outside the EU/EEA.

Use takes place exclusively after your consent in the cookie banner. Without consent these services are not loaded. You can withdraw your consent at any time with effect for the future.

7. Legal bases

• Art. 6(1)(a) – consent, for example for analytics and advertising cookies.
• Art. 6(1)(b) – performance of a contract or pre-contractual measures.
• Art. 6(1)(c) – compliance with legal obligations.
• Art. 6(1)(f) – legitimate interest, for example secure operation of the site and handling of partnerships.

8. Retention period

We retain personal data only as long as necessary for the respective purpose, or as long as statutory retention periods require. The data is then routinely deleted or blocked. Server log files are normally overwritten automatically after a short time.

9. Your rights

You have the following rights in relation to us:

• Access (Art. 15) – whether and which data we process about you, for what purpose and to whom we disclose it.
• Rectification (Art. 16) – to have inaccurate data corrected or incomplete data completed.
• Erasure (Art. 17) – unless a retention obligation prevents it.
• Restriction of processing (Art. 18).
• Data portability (Art. 20) – to receive your data in a common, machine-readable format.
• Objection (Art. 21) – to processing based on legitimate interests. You may object to direct marketing at any time and without giving reasons.
• Withdrawal of consent (Art. 7(3)) – at any time with effect for the future.

An informal message to the address given in the Imprint is sufficient to exercise these rights.

10. Right to lodge a complaint

Irrespective of this, you have the right to lodge a complaint with a data protection supervisory authority if you believe the processing of your data infringes the GDPR. The competent authority is generally that of your country of residence.

11. Automated decision-making

Automated decision-making or profiling within the meaning of Art. 22 GDPR does not take place on this site.

12. Data security

We use technical and organisational measures to protect your data against loss, manipulation and unauthorised access; transmission is encrypted via HTTPS. Complete protection cannot, however, be guaranteed for internet-based transmission. You are therefore free to send us information by other means.

Last updated: –